vault-auth-tee/.github/workflows/nix.yml

name: nix

on:
  pull_request:
    branches: [ "main" ]
    paths:
    - '**.nix'
    - 'go.mod'
    - 'go.sum'
    - 'flake.lock'
  push:
    branches: [ "main" ]
    paths:
      - '**.nix'
      - 'go.mod'
      - 'go.sum'
      - 'flake.lock'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: cachix/install-nix-action@6a9a9e84a173d90b3ffb42c5ddaf9ea033fad011 # v23
      with:
        extra_nix_config: |
          access-tokens = github.com=${{ github.token }}
    - run: nix flake check -L --show-trace --keep-going

  fmt:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: cachix/install-nix-action@6a9a9e84a173d90b3ffb42c5ddaf9ea033fad011 # v23
      with:
        extra_nix_config: |
          access-tokens = github.com=${{ github.token }}
    - run: nix fmt

  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: cachix/install-nix-action@6a9a9e84a173d90b3ffb42c5ddaf9ea033fad011 # v23
      with:
        extra_nix_config: |
          access-tokens = github.com=${{ github.token }}
    - uses: cachix/cachix-action@v12
      continue-on-error: true
      with:
        name: haraldh
        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
    - run: nix build -L .

  develop:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: cachix/install-nix-action@6a9a9e84a173d90b3ffb42c5ddaf9ea033fad011 # v23
      with:
        extra_nix_config: |
          access-tokens = github.com=${{ github.token }}
    - uses: cachix/cachix-action@v12
      continue-on-error: true
      with:
        name: haraldh
        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
    - run: nix develop -L  -c go test ./...